CVE-2026-110262
Low
Description
OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in forwardJumpStackFrames and allocation of hundreds of megabytes, leading to denial of service.
SeverityLow
CVSS3.3
Exploit probability—
Product
Microsoft Azl3 Objectweb-asm
PublishedOct 14, 2026
First seenOct 14, 2026
Weakness typeCWE-770Allocation of resources without limits
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft azl3_objectweb-asm_9.6-1 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.